fix eval_initial_program proof

it probably broke because of ~